CVE-2026-1207
SQL injection in Django
CVSS score
5.4
EPSS probability
%12.8
Risk score
0.7
Published
8 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Django 框架在使用 PostGIS 查询地理栅格（raster）数据时，若将未经验证的用户输入直接作为 band index（波段索引）参数，会引发 SQL 注入
Makefile Go / Python
Nuclei: Django RasterField - SQL Injection
Makefile Go / Python
Similar Vulnerabilities
5.9
CVE-2021-23336
Web Cache Poisoning
N
Patch verifiedEPSS %41
8.8
CVE-2026-15307
Server-side file-write and request forgery via spatial lookups
D
Partial patchEPSS %1
7.5
CVE-2026-25673
Uncontrolled resource consumption in Django
D
Patch verifiedEPSS %1
9.8
CVE-2025-59681
SQL injection in Django
D
Patch status unknownEPSS %1
6.5
CVE-2025-59682
Vulnerability in Django
D
Patch status unknownEPSS %1
5.3
CVE-2026-15830
Potential denial-of-service vulnerability via nested geometry collections
D
Partial patchEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-1207"